PCCSE · Question #209
Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in Azure cloud? (Choose two.)
The correct answer is A. API_ENDPOINT C. SB_QUEUE_KEY. Azure IAM auto-remediation in Prisma Cloud uses an Azure Service Bus queue (not AWS SQS) to receive remediation messages and trigger Azure Automation runbooks. To wire this up, you must configure API_ENDPOINT (the Prisma Cloud API URL that the remediation function calls back…
Question
Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in Azure cloud? (Choose two.)
Options
- AAPI_ENDPOINT
- BSQS_QUEUE_NAME
- CSB_QUEUE_KEY
- DYOUR_ACCOUNT_NUMBER
How the community answered
(25 responses)- A76% (19)
- B8% (2)
- D16% (4)
Explanation
Azure IAM auto-remediation in Prisma Cloud uses an Azure Service Bus queue (not AWS SQS) to receive remediation messages and trigger Azure Automation runbooks. To wire this up, you must configure API_ENDPOINT (the Prisma Cloud API URL that the remediation function calls back to) and SB_QUEUE_KEY (the Azure Service Bus queue connection key or SAS key). SQS_QUEUE_NAME is an AWS construct irrelevant to Azure. YOUR_ACCOUNT_NUMBER is an AWS-specific variable not required in the Azure remediation workflow.
Topics
Community Discussion
No community discussion yet for this question.